CWE-667 · Improper Locking (page 7)
Page 7 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26451 | Medium | 6.7 | 2022-09-06 | In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-3028 | High | 7.0 | 2022-08-31 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simulta… |
CVE-2022-38791 | Medium | 5.5 | 2022-08-27 | In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users… |
CVE-2021-3735 | Medium | 4.4 | 2022-08-26 | A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while handling a host-to-device Register FIS… |
CVE-2022-2959 | High | 7.0 | 2022-08-25 | A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe… |
CVE-2022-32811 | High | 7.8 | 2022-08-24 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-0… |
CVE-2022-20376 | Medium | 6.7 | 2022-08-11 | In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with Syst… |
CVE-2022-20371 | Medium | 6.4 | 2022-08-11 | In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w… |
CVE-2022-21775 | Medium | 6.7 | 2022-07-06 | In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-24946 | High | 7.5 | 2022-06-15 | Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Seri… |
CVE-2022-20153 | Medium | 6.7 | 2022-06-15 | In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the k… |
CVE-2022-20141 | High | 7.0 | 2022-06-15 | In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and clo… |
CVE-2022-31624 | Medium | 5.5 | 2022-05-25 | MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lo… |
CVE-2022-31623 | Medium | 5.5 | 2022-05-25 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while e… |
CVE-2022-31622 | Medium | 5.5 | 2022-05-25 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero valu… |
CVE-2022-31621 | Medium | 5.5 | 2022-05-25 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while… |
CVE-2021-39801 | High | 7.8 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-43429 | High | 7.5 | 2022-04-07 | A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock. |
CVE-2022-26356 | Medium | 5.6 | 2022-04-05 | Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_t… |
CVE-2022-0897 | Medium | 4.3 | 2022-03-25 | A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating ove… |
CVE-2021-4147 | Medium | 6.5 | 2022-03-25 | A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting… |
CVE-2021-4149 | Medium | 5.5 | 2022-03-23 | A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user… |
CVE-2021-3667 | Medium | 6.5 | 2022-03-02 | An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a loc… |
CVE-2021-20315 | Medium | 6.1 | 2022-02-18 | A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOM… |
CVE-2021-0147 | Medium | 4.4 | 2022-02-09 | Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may a… |
CVE-2022-22175 | High | 7.5 | 2022-01-19 | An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause… |
CVE-2021-41141 | Medium | 5.9 | 2022-01-04 | PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, T… |
CVE-2022-20016 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-39656 | Medium | 6.7 | 2021-12-15 | In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel w… |
CVE-2021-39649 | Medium | 6.7 | 2021-12-15 | In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with Sys… |
CVE-2021-39647 | Medium | 4.4 | 2021-12-15 | In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This coul… |
CVE-2021-39640 | High | 7.8 | 2021-12-15 | In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no… |
CVE-2021-41213 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can be made to deadlock when two `tf.functio… |
CVE-2021-1123 | Medium | 5.5 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can deadlock, which may lead to denial of service. |
CVE-2021-0625 | Medium | 6.7 | 2021-10-25 | In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-1622 | High | 8.6 | 2021-09-23 | A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, r… |
CVE-2021-31786 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAdd… |
CVE-2021-31785 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets… |
CVE-2021-31611 | Medium | 5.7 | 2021-09-07 | The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by… |
CVE-2021-38203 | Medium | 5.5 | 2021-08-08 | btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks dur… |
CVE-2021-0529 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional… |
CVE-2021-29509 | High | 7.5 | 2021-05-11 | Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connection… |
CVE-2020-11284 | High | 8.4 | 2021-05-07 | Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input f… |
CVE-2021-31427 | Medium | 5.6 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first… |
CVE-2021-31422 | High | 7.5 | 2021-04-29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the… |
CVE-2021-1782 | High | 7.0 | 2021-04-02 | A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mo… |
CVE-2021-20291 | Medium | 6.5 | 2021-04-01 | A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked us… |
CVE-2021-28951 | Medium | 5.5 | 2021-03-20 | An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be wa… |
CVE-2021-26708 | High | 7.0 | 2021-02-05 | A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong loc… |
CVE-2020-36220 | Medium | 5.9 | 2021-01-26 | An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occu… |
CVE-2020-12658 | Critical | 9.8 | 2020-12-31 | gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We… |
CVE-2020-27066 | Medium | 6.7 | 2020-12-15 | In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privile… |
CVE-2020-27035 | Medium | 5.5 | 2020-12-15 | In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in… |
CVE-2020-29661 | High | 7.8 | 2020-12-09 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSP… |
CVE-2020-29660 | Medium | 4.4 | 2020-12-09 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may al… |
CVE-2020-3704 | High | 7.5 | 2020-11-02 | u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dea… |
CVE-2019-8829 | High | 7.8 | 2020-10-27 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Up… |
CVE-2020-9959 | Low | 2.4 | 2020-10-16 | A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and… |
CVE-2020-9946 | Medium | 6.8 | 2020-10-16 | This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified… |
CVE-2020-0423 | High | 7.8 | 2020-10-14 | In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel… |
CVE-2020-0420 | High | 7.8 | 2020-10-14 | In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of pr… |
CVE-2020-15674 | High | 8.8 | 2020-10-01 | Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2020-15668 | Medium | 4.3 | 2020-10-01 | A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and F… |
CVE-2020-0357 | High | 7.8 | 2020-09-17 | In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no… |
CVE-2020-0303 | High | 8.8 | 2020-09-17 | In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no add… |
CVE-2020-0433 | High | 7.8 | 2020-09-17 | In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit… |
CVE-2020-24606 | High | 8.6 | 2020-08-24 | Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Ca… |
CVE-2020-0243 | High | 7.8 | 2020-08-11 | In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in th… |
CVE-2020-0242 | High | 7.8 | 2020-08-11 | In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media serve… |
CVE-2020-15529 | High | 7.8 | 2020-07-05 | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operati… |
CVE-2019-14091 | High | 7.8 | 2020-06-22 | Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… |
CVE-2020-13246 | High | 7.5 | 2020-05-20 | An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization… |
CVE-2020-12771 | Medium | 5.5 | 2020-05-09 | An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails. |
CVE-2019-14898 | High | 7.0 | 2020-05-08 | The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause… |
CVE-2020-10573 | High | 7.5 | 2020-03-14 | An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge. |
CVE-2019-10494 | High | 8.1 | 2019-12-12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Cons… |
CVE-2019-13762 | Low | 3.3 | 2019-12-10 | Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local cod… |
CVE-2019-17343 | Medium | 6.8 | 2019-10-08 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the… |
CVE-2019-9268 | Medium | 5.5 | 2019-09-27 | In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no add… |
CVE-2019-9447 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of… |
CVE-2019-9275 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution pri… |
CVE-2019-9273 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalati… |
CVE-2019-2174 | High | 7.8 | 2019-09-05 | In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking… |
CVE-2019-15513 | High | 7.5 | 2019-08-23 | An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR0… |
CVE-2019-14763 | Medium | 5.5 | 2019-08-07 | In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid. |
CVE-2019-2119 | Medium | 5.5 | 2019-07-08 | In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclo… |
CVE-2019-10072 | High | 7.5 | 2019-06-21 | The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5… |
CVE-2019-2025 | High | 7.8 | 2019-06-19 | In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel w… |
CVE-2019-6322 | Medium | 6.8 | 2019-05-29 | HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM… |
CVE-2019-6321 | High | 7.2 | 2019-05-29 | HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM… |
CVE-2019-1732 | Medium | 6.4 | 2019-05-15 | A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentia… |
CVE-2019-1649 | Medium | 6.7 | 2019-05-13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an aut… |
CVE-2019-2050 | High | 7.8 | 2019-05-08 | In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of privileg… |
CVE-2019-11599 | High | 7.0 | 2019-04-29 | The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs… |
CVE-2019-3901 | Medium | 4.7 | 2019-04-22 | A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mu… |
CVE-2019-6156 | Low | 3.3 | 2019-04-10 | In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protecti… |
CVE-2019-5886 | Critical | 9.8 | 2019-01-10 | An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lock file in the Add method, which allows… |
CVE-2018-0381 | Medium | 6.8 | 2018-10-17 | A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload… |
CVE-2018-15390 | Medium | 6.8 | 2018-10-05 | A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affec… |
CVE-2018-0228 | High | 8.6 | 2018-04-19 | A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause… |